Stephen Paul Marsh created Zero trust in 1994.
https://www.stackscale.com/blog/zero-trust-security/
https://en.wikipedia.org/wiki/Zero_trust_security_model
And his original thesis from 1994 https://www.cs.stir.ac.uk/~kjt/techreps/pdf/TR133.pdf
Credit should go where credit is due. It should be telling that someone claims to have invented something
when its a farce.